Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected With Surfsidekick 3 (tried Tutorial Already)


  • This topic is locked This topic is locked
69 replies to this topic

#1 !nfinity-5x

!nfinity-5x

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:09:53 PM

Posted 11 March 2006 - 06:24 PM

Ok, so I've tried many things to get rid of this stupid thing but it hasn't worked and you're my final hope.

First off, i tried the tutorial already (posted on the self-help board), but i should note that i haven't gone through all the steps yet. Here are my problems:

-I ran Hijackthis and tried to delete several of the files, the .exe files got deleted but if i scanned again right after, it reappeared. then i deleted and rebooted but they were still there.

-the file: AppInit_DLLs: repairs302973000.dll i tried to delete(from hijackthis) but when i did it said "An unexpected error has occurred at procedure: modBackup_MakeBackup(sItem=O20 - AppInit_DLLs: repairs302973000.dll)
Error #5 - Invalid procedure call or argument"

-the directory in program files i cannot delete because when i try to it says the dlls are in use. (SskBho.dll and SskCore.dll are the only 2 files in the folder). And i can't even stop them first before deleting because they don't show up in the task manager. I read something about a "killbox" would that work?

-i haven't found any of the 4 files when i searched for them (actually i think i forgot to search for one of them) and i haven't merged the registry data yet

So here's my log:


Logfile of HijackThis v1.99.1
Scan saved at 6:07:05 PM, on 11/03/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\xdgkzmf.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\xdgkzmfA.exe
C:\WINDOWS\win3208154647551.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Multimedia\RemCtrl\ATIRW.exe
C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\CfgWiz.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Norton AntiVirus\NAVW32.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\Johnny\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://hispeed.rogers.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R3 - URLSearchHook: (no name) - {02EE5B04-F144-47BB-83FB-A60BD91B74A9} - C:\Program Files\SurfSideKick 3\SskBho.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [D-Link AirPlus XtremeG] C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [xdgkzmfA] C:\WINDOWS\xdgkzmfA.exe
O4 - HKLM\..\Run: [win3208154647551] C:\WINDOWS\win3208154647551.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [SurfSideKick 3] C:\Program Files\SurfSideKick 3\Ssk.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] "C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe"
O4 - HKLM\..\Run: [NAV CfgWiz] "C:\Program Files\Norton AntiVirus\CfgWiz.exe" /GUID {0D7956A2-5A08-4ec2-A72C-DF8495A66016} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ATI Remote Control] C:\Program Files\ATI Multimedia\RemCtrl\ATIRW.exe
O4 - HKCU\..\Run: [ATI DeviceDetect] C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
O4 - HKCU\..\Run: [SurfSideKick 3] C:\Program Files\SurfSideKick 3\Ssk.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\tv\EXPLBAR.DLL
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwe...tup1.0.0.15.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://cdn.messenger.msn.com/download/MsnM...pDownloader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: repairs302973000.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Windows Overlay Components - Unknown owner - C:\WINDOWS\xdgkzmf.exe

Any help would be greatly appreciated.

BC AdBot (Login to Remove)

 


#2 amateur

amateur

    Malware Fighter


  • Malware Response Team
  • 2,775 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:09:53 PM

Posted 11 March 2006 - 07:46 PM

Hi !nfinity-5x :thumbsup: ,

Welcome to BC. :flowers:
I am checking your log now. I'll get back to you as soon as I have my set of instructions prepared.

#3 !nfinity-5x

!nfinity-5x
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:09:53 PM

Posted 11 March 2006 - 08:10 PM

Thank you for the welcome, and take your time.

#4 amateur

amateur

    Malware Fighter


  • Malware Response Team
  • 2,775 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:09:53 PM

Posted 11 March 2006 - 09:10 PM

Hi again !nfinity-5x,

Please print the following instructions so that you'll have access to them at all times. Read them carefully and follow them in the order they are given without missing any.

==============================

Download ATF Cleaner by Atribune and save it to your Desktop. Do not use it yet.

==============================

Download and CWShredder 2.19 from
http://www.intermute.com/spysubtract/cw...nload.html or
http://www.trendmicro.com/cwshredder/

Launch the executable and then click "Check for Update"
Download and install any updates.
Now, close any open windows except for CWShredder and then click "Fix"
It should take about a minute to run, then click "Next" You'll see three lines starting with "Restoring" to let you know the scan is finished.

==============================

Go to Start > Control Panel > Add/Remove programs and removel the following program(s) if present:

Surf Sidekick
Surf Sidekick 2
Surf Sidekick 3


It may prompt about whether or not you are sure you want to remove this program. Reply Yes to this prompt.

If there is no Add/Remove Programs entry for this program(s), click on Start > Run and type in:

C:\Program Files\SurfSideKick 3\Ssk.exe /u

and hit OK. A code will be displayed that it will ask you to enter. Please enter this code and reboot. Once back to your desktop continue with the rest of the fix.

When you installed Messenger Plus!, do you remember unchecking the box to install the sponsor software? If not, then please remove Messenger Plus 3 from the Add/Remove Programs as well.

==============================

Microsoft Antispyware is a wonderful tool, but we'll need to disable it so that it will not interfere with the fixes. Once the computer is clean you can re-enable it.

Disable Microsoft AntiSpyware
1. Open Microsoft AntiSpyware.
2. Click on Options> Settings.
3. In the left pane, click on Real-time Protection.
4. Under Startup Options uncheck Enable the Microsoft AntiSpyware Security Agents on startup (recommended).
5. Under Real-time spyware threat protection uncheck Enable real-time spyware threat protection (recommended).
6. After you unchecked these, click on the Save button and close Microsoft AntiSpyware.
7. Right click on the Microsoft AntiSpyware Icon on the taskbar and select Shutdown Microsoft AntiSpyware

==============================

Please copy the following text inside the quote box below to a blank Notepad (not wordpad) file. Make sure the filetype is set to "All Files" and save it as Removeservice.bat. to your desktop.

@echo off
sc stop Windows Overlay Components
sc delete Windows Overlay Components


Double-click on Removeservice.bat. A window will pop up and close. This is normal. Please restart your computer.

==============================

Make sure that you can see hidden files
" Click Start
" Open My Computer
" Select the Tools menu and click Folder Options
" Select the View Tab
" Under the Hidden files and folders heading select Show hidden files and folders
" Uncheck the Hide protected operating system files (recommended) option
" Click Yes to confirm
" Click OK

==============================

Next, please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.
Look in here for more information.

==============================

Scan with HijackThis and put a checkmark against the following entries:


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://hispeed.rogers.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
O4 - HKLM\..\Run: [xdgkzmfA] C:\WINDOWS\xdgkzmfA.exe
O4 - HKLM\..\Run: [xdgkzmfA] C:\WINDOWS\xdgkzmfA.exe
O4 - HKLM\..\Run: [SurfSideKick 3] C:\Program Files\SurfSideKick 3\Ssk.exe
O4 - HKLM\..\Run: [SurfSideKick 3] C:\Program Files\SurfSideKick 3\Ssk.exe
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwe...tup1.0.0.15.cab
O20 - AppInit_DLLs: repairs302973000.dll


Close all browsers/windows/applications, except HijackThis, and click on "fix checked".

==============================

Using Windows Explorer, navigate to and delete the following files and folders, if present:

C:\WINDOWS\system32\repairs302973000.dll
C:\WINDOWS\xdgkzmf.exe
C:\WINDOWS\xdgkzmfA.exe
C:\Documents and Settings\User\Application Data\Sskknwrd.dll (you will have to replace the word User with your actual user account name/s)

Using Windows Search function, search for the following files and delete them, if present:

Sskknwrd.dll
Ssk.log
SskUpdater.exe
Ssk.exe


C:\PROGRAM FILES\SurfSideKick <====== if there are more than one folder with the same name, delete them all.

==============================

Double click ATF-Cleaner.exe to run the program.
Check the boxes to the left of:

Windows Temp
Current User Temp
All Users Temp
Temporary Internet Files
Prefetch
Java Cache

The rest are optional - if you want to remove the lot, check "Select All".

Finally click Empty Selected. When you get the "Done Cleaning" message, click OK.

If you use the Firefox or Opera browsers, you can use this program as a quick way to tidy those up as well.

Firefox :
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Opera :
Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.

When you have finished, click on the Exit button in the Main menu.

==============================

Reboot back into Normal Mode.

==============================

Post another HijackThis log please.

Edited by amateur, 11 March 2006 - 09:44 PM.


#5 !nfinity-5x

!nfinity-5x
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:09:53 PM

Posted 11 March 2006 - 10:55 PM

Ok I'm working my way through the steps now and i've reached the part where i got to put C:\Program Files\SurfSideKick 3\Ssk.exe /u
in the run and its saying " Windows cannot find 'C:\Program'. Make sure you typed name properly..blah blah"

So i'm just wondering do i continue and just ignore this step? cause i dont see a reason as to why it would say this. (there's no ssk.exe in the folder unless its hidden or something, so maybe thats it?)(and i tried sskbho and sskcore alrdy)

oh and i really cant remember about unchecking the sponser thing for messenger plus. But when i was going to remove it said 'the sponser program does not appear to be installed on this computer' however i do remember microsoft anitspyware bringing up messenger plus as a low-threat. so shud i leave it or delete it?

again, thank you for the help

Edited by !nfinity-5x, 11 March 2006 - 11:46 PM.


#6 amateur

amateur

    Malware Fighter


  • Malware Response Team
  • 2,775 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:09:53 PM

Posted 12 March 2006 - 06:35 AM

Hi,

Ok I'm working my way through the steps now and i've reached the part where i got to put C:\Program Files\SurfSideKick 3\Ssk.exe /u
in the run and its saying " Windows cannot find 'C:\Program'. Make sure you typed name properly..blah blah"



I want to make something sure here. Does it say 'Windows cannot find 'C:\Program' or does it say 'C:\Program Files\SurfSideKick 3\Ssk.exe /u'.

there's no ssk.exe in the folder unless its hidden or something

suggests that

it's the latter. Removing it from Add/Remove programs must have worked. That's fine. Skip that step and continue with the rest of the instructions, please.

About the Messenger Plus 3, i would say it's up to you. But, if it were me, I would remove it.

Edited by amateur, 12 March 2006 - 10:04 AM.


#7 !nfinity-5x

!nfinity-5x
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:09:53 PM

Posted 12 March 2006 - 01:21 PM

It says 'C:\Program' that is why i found it weird. Anyways i'll continue with the rest of the steps. By the way when i went to the add/remove programs it didnt show up (just letting you know in case anything).

Edited by !nfinity-5x, 12 March 2006 - 01:23 PM.


#8 amateur

amateur

    Malware Fighter


  • Malware Response Team
  • 2,775 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:09:53 PM

Posted 12 March 2006 - 01:37 PM

Yes, please go ahead with the rest of the fix and we'll see.

#9 !nfinity-5x

!nfinity-5x
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:09:53 PM

Posted 12 March 2006 - 02:41 PM

Ok i feel like an idiot for being stuck at this step, but i'm trying to restart my comp in safe mode but its not working. could it be cause my keyboard is usb? i should note that my windows is a little messed up and i need a windows boot disk to start up windows or else it says "disk read error, please press ctrl+alt+delete to restart your computer" if i dont have the disk in it doesnt start windows, so i usually just leave it in my floppy drive. is there anyway to restart windows in safe mode from windows? and sorry for being so difficult. I also tried what it said in that link, i tried repeatedly pressing it, holding it and i tried pulling the power of my CPU but i still couldn't get into safe mode.

Edited by !nfinity-5x, 12 March 2006 - 02:54 PM.


#10 amateur

amateur

    Malware Fighter


  • Malware Response Team
  • 2,775 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:09:53 PM

Posted 12 March 2006 - 03:08 PM

Ok i feel like an idiot for being stuck at this step, but i'm trying to restart my comp in safe mode but its not working. could it be cause my keyboard is usb?


I don't think so.

i should note that my windows is a little messed up and i need a windows boot disk to start up windows


That doesn't sound good. You may have some corrupted system files . Try this:

First get your XP install CD out in case it is needed. Click Start > Run > Type sfc /scannow , press enter (make sure you have a space between c and /). This will run a system file check on your system and restores faulty system files.

You can also try this:

Download this file and save it to your desktop or to another location where you can find it. Double click on the file to run it once it's downloaded and see if it helps.

There is a way to start in Safe mode from Windows, but you need to have a stable computer and I am not sure that you do. You can read more on it here

Edited by amateur, 12 March 2006 - 03:09 PM.


#11 !nfinity-5x

!nfinity-5x
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:09:53 PM

Posted 12 March 2006 - 03:56 PM

wow, umm i tried all 3 of those methods and i still can't get it into safe mode.

#12 amateur

amateur

    Malware Fighter


  • Malware Response Team
  • 2,775 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:09:53 PM

Posted 12 March 2006 - 04:02 PM

What happens? Do you get an error message? What's the error message?

#13 !nfinity-5x

!nfinity-5x
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:09:53 PM

Posted 12 March 2006 - 04:05 PM

No i dont get anything. i did the scan and inserted my windows install cd, then it took like 5 mins then just closed automatically. I tried to start it up in safe mode but still nothing happened. I tried the XP fix but still nothing. and even when i went to the system configuration and checked safeboot it didnt do anything. (I have a selective startup running with modified boot checked not original boot, but that shouldnt be a problem right?)

#14 amateur

amateur

    Malware Fighter


  • Malware Response Team
  • 2,775 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:09:53 PM

Posted 12 March 2006 - 04:05 PM

Do you have your XP installation CD?

#15 !nfinity-5x

!nfinity-5x
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:09:53 PM

Posted 12 March 2006 - 04:06 PM

yes, i do




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users